Chapter 9. MetaFrame Security

9. MetaFrame Security

Terms you'll need to understand:

• Administrative delegation

• Privilege types

• ICA connection encryption and SecureICA

• Minimum required encryption level

• Kerberos client authentication

• SSL Relay

• Server certificate

• Root certificate

• Certificate authority

Concepts and techniques you'll need to master:

• Planning and defining administrative privileges

• Delegating privileges based on different server farm zones

• Troubleshooting administration issues caused by delegation settings

• Defining the minimum required ICA encryption level

• Troubleshooting encryption issues from connecting clients

• Configuring a MetaFrame server farm to support Kerberos client authentication

• Recognizing the differences between ICA encryption and Kerberos authentication

• Assigning a server certificate to a MetaFrame server

• Describing the role of a certificate authority and the reason for root certificates

No MetaFrame Presentation Server (MPS) implementation would be complete without an administrator ensuring that the server farm had been properly secured. In this chapter, we focus on the client and server methods available as part of the core MPS software that allow an administrator to secure his or her server farm. Another access security component, called the Secure Gateway for MPS, will be discussed in Chapter 14, "Web Access to the MetaFrame Server Farm." The Secure Gateway for MPS is implemented only if you're leveraging the Web Interface for MPS to provide secure web browserbased access to the server farm. The four security-specific MPS componentsadministrative delegation, ICA connection encryption, Kerberos client authentication, and SSL Relayare part of the core MPS software and are reviewed in this chapter.